---
id: CVE-2026-80553
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/vfio_ccw: Cancel existing workqueues

  The initialization of the io_work and crw_work workqueues begs the
  question of whether they should be un-initialized
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/vfio_ccw: Cancel existing workqueues

  The initialization of the io_work and crw_work workqueues begs the
  question of whether they should be un-initialized. Add the…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    87d569cb35a541b31a184faf982540694d4c9a89
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    7492ca2d0c5d59add01e267be9f5a6eeb8076fd7
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    b94b28c1f0fae53b2f2d6180ae6442c9a1558f67
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    e868ea8be0bc88c6982f48ecf3259d98afd884ae
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    dc47a98abe6714577a25224534dbd356051097a3
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    b7ae0f7993867d009a4b554fc1d6d451c10580a0
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    77f5e888d2e607a0b3141fb95091ad6ef1cca9a2
  - >-
    Linux >= e5f84dbaea59b4f712dac428c337528b70e1c533 <
    79c60b2c61105368dcc8444eb45847e21734f7c4
  - Linux 4.12
published: '2026-08-26'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T20:17:59.697'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-80553'
references:
  - url: 'https://git.kernel.org/stable/c/7492ca2d0c5d59add01e267be9f5a6eeb8076fd7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/77f5e888d2e607a0b3141fb95091ad6ef1cca9a2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/79c60b2c61105368dcc8444eb45847e21734f7c4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/87d569cb35a541b31a184faf982540694d4c9a89'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b7ae0f7993867d009a4b554fc1d6d451c10580a0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b94b28c1f0fae53b2f2d6180ae6442c9a1558f67'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/dc47a98abe6714577a25224534dbd356051097a3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e868ea8be0bc88c6982f48ecf3259d98afd884ae'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00176
epssPercentile: 0.07052
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T19:17:19.506995Z'
ingestedAt: '2026-10-16T19:46:24.318Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/vfio_ccw: Cancel existing workqueues

The initialization of the io_work and crw_work workqueues begs the
question of whether they should be un-initialized. Add the corresponding
cleanup tags in _release_dev to ensure work isn't dispatched after
the private struct is free'd.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.